CVE-2022-23091 Memory disclosure by stale virtual memory mapping

A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, but with a different root cause. An unprivileged local user process can maintain a mapping of a page after it is freed, allowing that process to read private data belonging to othe...

The vulnerability of the /admin/info/properties component of the Apache Solr search server, which allows a hacker to disclose protected information

The vulnerability of the /admin/info/properties component of the Apache Solr search server is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

PT-2024-12153 · Dell · Dell Os10 Networking Switches

Name of the Vulnerable Software and Affected Versions: Dell OS10 Networking Switches versions 10.5.2.x and above Description: A remote unauthenticated attacker could potentially exploit a vulnerability with zeroMQ when VLT is configured, leading to information disclosure and a possible Denial of...

The vulnerability of the Undertow web server, related to deficiencies in the processing of incoming HTTP requests, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the Undertow web server is related to deficiencies in the processing of incoming HTTP requests during the analysis of cookies containing certain delimiter symbols. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the...

PT-2024-15314 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In the setParameter function of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote informati...

CVE-2023-46186 IBM Jazz for Service Management information disclosure

IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using forced browsing due to improper access controls. IBM X-Force ID: 269929...

PT-2024-13186 · Dell · Dell Secure Connect Gateway Appliance

Name of the Vulnerable Software and Affected Versions: Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance versions 5.10.00.00 through 5.18.00.00 Description: A security concern has been identified where a malicious user with a valid user session may inject malicious...

PT-2024-1763 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 9.1.1 and earlier Description: The issue is related to an out-of-bounds read operation in memory, which could allow an attacker to disclose sensitive information. Exploitation of this issue requires user...

The vulnerability of the Extensive VC Addons plugin of the WordPress content management system allows attackers to expose sensitive information that should be protected.

The vulnerability of the Extensive VC Addons plugin of the WordPress content management system is related to improper code generation. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Complaint Management System 2.0 SQL Injection

Exploit Title: Complaint-Management-System Multiple SQL Injection Vulnerabilities Date: 02/09/2-24 Exploit Author: Diyar Saadi Vendor Homepage: https://phpgurukul.com/complaint-management-sytem/ Software Link: https://phpgurukul.com/?sdmprocessdownload=1&downloadid=7259 Version: V 2.0 Tested on:...

PT-2024-3883 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP versions KERNEL 7.53 through KERNEL 7.94 SAP NetWeaver Application Server ABAP version KRNL64UC 7.53 Description: The issue is related to insufficient protection of internal data in the SAP NetWeaver...

PT-2024-3899 · Sap · Sap Master Data Governance For Material

Name of the Vulnerable Software and Affected Versions: SAP Master Data Governance for Material Data - versions 618, 619, 620, 621, 622, 800, 801, 802, 803, 804 Description: The issue is related to the absence of a necessary authorization check for an authenticated user, resulting in escalation of...

Complaint Management System 2.0 SQL Injection Vulnerability

Exploit Title: Complaint-Management-System Multiple SQL Injection Vulnerabilities Exploit Author: Diyar Saadi Vendor Homepage: https://phpgurukul.com/complaint-management-sytem/ Software Link: https://phpgurukul.com/?sdmprocessdownload=1&downloadid=7259 Version: V 2.0 Tested on: Windows 11 + XAMP...

CVE-2023-46350

SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical search" idxrmanufacturer module for PrestaShop versions 2.0.4 and before, allows remote attackers to escalate privileges and obtain sensitive information via the methods IdxrmanufacturerFunctions::getCornersLink,...

PT-2024-2332 · Hcl · Hcl Sametime Chat/Meetings

Name of the Vulnerable Software and Affected Versions: HCL Sametime Chat and Meetings affected versions not specified Description: The issue is related to the lack of protection for sensitive data in the HCL Sametime Chat and Meetings software. It is mentioned that sensitive fields have...

The vulnerability of the WP Sessions Time Monitoring plugin in the fully automatic WordPress content management system allows attackers to expose protected information.

The vulnerability of the WP Sessions Time Monitoring full-automatic content management system’s plugin is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose the protected information...

CVE-2024-22331

IBM UrbanCode Deploy UCD 7.0 through 7.0.5.19, 7.1 through 7.1.2.15, 7.2 through 7.2.3.8, 7.3 through 7.3.2.3, and IBM UrbanCode Deploy UCD - IBM DevOps Deploy 8.0.0.0 could disclose sensitive user information when installing the Windows agent. IBM X-Force ID: 279971...

The vulnerability of the Printing component in the macOS operating system allows a hacker to disclose sensitive information that should be protected.

The vulnerability of the Printing component in the macOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Accounts component in operating systems macOS, iOS, and iPadOS allows attackers to disclose protected information.

The vulnerability of the Accounts component in operating systems such as macOS, iOS, and iPadOS relates to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker to disclose the protected information...

CVE-2023-33851

CVE-2023-33851 affects IBM PowerVM Hypervisor information disclosure. Vulnerable firmware versions: FW950.00–FW950.90, FW1020.00–FW1020.40, FW1030.00–FW1030.30. Issue: could reveal sensitive partition data to a system administrator. Remediation: upgrade to FW950.A0 (950_145) or newer; FW1020.50 (...